An exporter completes due diligence on a buyer, ships a consignment of dual-use components, and believes the transaction is closed. Six months later, the same goods appear in a context the exporter never anticipated. The question is no longer whether the buyer was listed at the time of shipment – it is whether the exporter took adequate steps to verify what the buyer intended to do with the goods, and who the ultimate recipient would be. Under the UN sanctions regime, end-use and end-user controls are the mechanism that closes this gap.
End-use and end-user controls under the UN regime require exporters and intermediaries to verify the stated purpose of a transfer, confirm the identity of the party who will actually use the goods, and put in place contractual and operational safeguards to prevent diversion to prohibited persons or programmes. The governing authority is the UN Security Council, acting through its committee-administered lists and the UN Consolidated List. As of April 2026, those obligations cascade into national implementing law across every major trading jurisdiction.
This guide works through the procedure in six stages – from initial classification and screening through post-shipment monitoring – and identifies the pitfalls that most commonly expose exporters, freight forwarders, and compliance teams in cross-border transactions.
Step 1: Understand the governing authority and its reach
The UN Security Council creates binding obligations on all Member States under Chapter VII of the UN Charter, and those obligations – including end-use and end-user requirements – flow directly into the domestic law of every jurisdiction that implements the relevant resolutions. No exporter can treat this as a regime that applies only to the buyer's country or only to UN-listed items. The reach is universal.
The UN Consolidated List is the central reference point. It names individuals, entities, and groups subject to asset-freeze, travel-ban, and arms-embargo measures. Security Council committee decisions update it, sometimes without advance notice. In our experience, compliance teams that treat the Consolidated List as a static reference – checked once at onboarding – create a structural gap that diversion operators specifically exploit.
The critical procedural point at this stage is to identify which UN committee resolution governs the goods and the destination in question. Different committee resolutions carry different end-use restrictions. Some prohibit the supply of any arms and related materiel; others restrict specific categories of goods that could contribute to a designated programme. Understanding which resolution applies determines what the end-use obligation actually requires.
Jurisdictions implementing UN obligations also layer their own national controls on top. A transaction that passes a UN Consolidated List screen may still trigger national export-licensing requirements in the United States under the Export Administration Regulations, in the UK under the Export Control Order, or in the EU under the applicable dual-use regulation. The UN obligation sets the floor; national law may go further. Where the two regimes diverge, the stricter prohibition governs.
Step 2: Classify the goods and map the applicable restrictions
Accurate classification of the goods or technology being transferred is the foundation of any end-use analysis. A misclassified item is an uncontrolled item in practical terms – and that error compounds at every downstream stage of the transaction.
Under the UN regime, the arms and related materiel categories set out in the relevant committee decisions define the scope of the prohibition. Exporters should map each item against those categories and confirm whether any national control list – such as the Commerce Control List under the EAR in the United States or the EU dual-use list – applies in addition. An ECCN (Export Control Classification Number under the US Commerce Control List) is a useful reference tool for items with potential dual-use applications, even where the primary regulatory concern is UN compliance.
The classification exercise must account for the full technical specification of the goods. Components that appear innocuous in isolation may fall within restricted categories when their intended application is considered. This is the end-use angle: the same component classified differently depending on whether it is destined for a civilian industrial process or for a programme that a UN committee resolution restricts.
We regularly advise clients who have relied on a supplier's classification rather than conducting their own. That reliance does not transfer liability. Each party in the supply chain is independently responsible for confirming that the classification is correct and that the applicable restrictions are identified before the transaction proceeds.
Step 3: Screen the end-user and verify the stated end-use
Screening the buyer against the UN Consolidated List is necessary but not sufficient. The end-user – the party who will actually use the goods – may be different from the buyer, and that party also requires screening. Diversion patterns frequently insert a clean intermediary between the exporter and the prohibited end-user precisely because exporters screen only the immediate counterparty.
The procedural steps at this stage are:
- Screen the immediate buyer, freight forwarder, consignee, and any named end-user against the UN Consolidated List and any applicable national lists simultaneously.
- Obtain a signed end-user certificate or equivalent declaration from the buyer, specifying the stated end-use, the end-user's identity, and a commitment not to re-transfer without prior authorisation.
- Assess the plausibility of the stated end-use against the buyer's known business, the technical specification of the goods, and the destination country's industrial capacity.
- Where the stated end-use or the end-user's identity cannot be independently verified, escalate to a senior compliance decision before the transaction proceeds.
The plausibility assessment is where analytical judgment matters most. Is a buyer in a lightly industrialised economy plausibly the end-user of precision guidance components? Does the order quantity match the buyer's stated production volumes? These questions do not yield to a checklist alone; they require a practitioner who understands the goods, the sector, and the destination.
Cross-border divergence is significant here. Under the EAR administered by the US Bureau of Industry and Security (BIS), the end-user obligation extends to knowledge of diversion risk – a standard that can catch an exporter who deliberately avoids inquiry. The EU regime similarly treats wilful blindness as knowledge for the purposes of the applicable dual-use controls. The UK regime under the Export Control Order follows a comparable approach. The UN obligation does not prescribe a specific knowledge standard in its implementing text, but national law fills that gap – and the higher national standard always governs in practice.
How does the UN regime differ from OFAC, OFSI, and EU controls on end-use?
The UN regime sets the baseline for all Member State obligations, but the major implementing jurisdictions each add procedural requirements and enforcement postures that depart from the baseline in ways that matter operationally.
Under OFAC – the US Office of Foreign Assets Control – the end-use obligation sits within a broader strict-liability enforcement model. An exporter who transfers goods to a non-listed buyer who then diverts them to a listed end-user may face civil liability even without proof of knowledge. The 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) means that an end-user who does not appear on any list may nonetheless be a blocked party. That rule has no precise equivalent in the UN Consolidated List architecture, though UN committee resolutions can designate entities controlled by listed persons.
OFSI – the UK Office of Financial Sanctions Implementation – administers UK financial sanctions separately from the UN obligation, but the UK's export controls under ECJU operate in parallel. The ownership and control test under the UK regime differs in emphasis from the OFAC 50 percent rule: UK sanctions law applies an ownership and control test that considers practical influence, not just percentage holdings. An exporter dealing with a UK-connected supply chain must apply both tests independently.
Under EU law, the applicable dual-use regulation and the relevant Council regulations impose end-use assurance requirements as a condition of export authorisation. The EU regime is notable for the breadth of catch-all controls: even items not listed may require a licence if the exporter knows or has been informed that the goods will be used in connection with a prohibited programme or a listed entity. The UN obligation does not replicate this catch-all structure directly, but EU exporters operating under UN-implementing regulations are subject to it.
For businesses in Singapore, the UAE, and Japan, the applicable country regime implements UN resolutions through national strategic trade controls. Each jurisdiction layers additional national requirements. In our cross-border practice, we find that the procedural divergence between these regimes – particularly on record-keeping periods and the format of end-user certificates – creates the most frequent compliance gaps for multinational supply chains.
Step 4: Put contractual and operational safeguards in place
An end-user certificate obtained at the point of sale is a starting point, not a complete safeguard. Contractual protections must be designed to give the exporter a legally enforceable right to take remedial action if the goods are diverted, and to create a documented record that the exporter exercised appropriate care throughout the transaction lifecycle.
The core contractual elements are:
- A warranty from the buyer that the goods will be used only for the stated end-use and by the stated end-user.
- A prohibition on re-transfer without the exporter's prior written consent and, where required, prior authorisation from the relevant competent authority.
- A right for the exporter to suspend or terminate the contract if a reasonable basis emerges to believe that the goods will be or have been diverted.
- A record-keeping obligation on the buyer covering the storage, deployment, and ultimate disposition of the goods.
The operational layer matters equally. For higher-risk transactions – goods with significant dual-use potential, buyers in destinations subject to heightened scrutiny, or transactions involving multiple intermediaries – post-shipment verification measures are appropriate. These may include delivery verification requests, third-party inspection arrangements, or periodic compliance certifications from the buyer. The UN regime does not prescribe a specific post-shipment monitoring procedure, but the absence of such measures is consistently identified by enforcement authorities as an aggravating factor when diversion is subsequently discovered.
The position above covers the standard case. Your facts – the counterparty, the goods, the route, the regime in play – change the analysis. For an assessment of your exposure under the applicable UN and national export-control regimes, contact Calder & Vance at info@caldervance.com.
What are the common pitfalls, and when should you involve counsel?
The most persistent pitfalls in end-use and end-user compliance are not failures to know the rules. They are failures to apply the rules to facts that do not present themselves neatly. Diversion operators are specifically skilled at constructing transactions that pass a first-layer screen. The gaps are structural and operational, not merely doctrinal.
The most common structural gap is the screening perimeter that stops at the immediate buyer. Intermediaries, freight forwarders, and named consignees are end-users in the relevant legal sense when they are the ultimate recipient of the goods. A compliance programme that screens only the named counterparty on the purchase order will routinely miss this.
The second common pitfall is the stale end-user certificate. An end-user declaration obtained at the start of a commercial relationship is not effective indefinitely. Where the buyer's business, ownership, or operating geography changes, the original declaration may no longer accurately represent the end-use. Periodic re-verification is appropriate for ongoing supply relationships, particularly where the goods have significant dual-use potential.
A third pitfall is the assumption that a transaction below a national licensing threshold requires no end-use analysis. The UN obligation applies regardless of value or quantity thresholds in national export-control law. A sub-threshold transaction can still involve a prohibited end-user or a prohibited end-use, and the absence of a licensing requirement does not extinguish the duty to screen.
Counsel should be involved when: a screening return produces a potential match against the UN Consolidated List or any national list; the stated end-use is implausible or inconsistent with the buyer's known business; the transaction involves multiple jurisdictions with divergent national requirements; or a post-shipment event raises concern about diversion. Early involvement preserves options. If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss the position.
Step 6: Record-keeping and post-transaction review
Effective record-keeping is both a legal obligation and a practical defence. Across the major implementing jurisdictions, exporters are required to retain documentation relating to export transactions for defined periods. The applicable period varies by regime and by national law; verify the current requirement for each jurisdiction before relying on any general statement. In our practice, we recommend aligning to the longest retention period across all regimes applicable to a given transaction.
The records that matter most in an enforcement context are not the export licences and shipping documents – those are routinely retained. The records that prove appropriate end-use and end-user diligence are the screening logs, the end-user certificates, the plausibility assessments, the escalation decisions, and the post-shipment verification correspondence. These are the documents that demonstrate that the exporter applied a genuine, documented process rather than a mechanical check.
A post-transaction review discipline also serves a proactive function. Where a buyer's circumstances change – ownership, jurisdiction, or business activity – a periodic review of the existing end-user position may reveal that a transaction that was compliant at shipment has since created residual exposure. The UN Consolidated List is updated regularly. A party who was not listed at the time of export may be listed subsequently, and if goods supplied under a prior transaction are still in use, the post-listing position requires assessment.
Does your compliance programme include a mechanism to identify when a previously clean counterparty appears on an updated list? In our experience, the answer is less frequently yes than compliance teams assume.
Related practices
- Deemed export and technology controls under BIS and the EAR – how US technology controls interact with end-use obligations in cross-border transactions
- End-use and end-user controls: advanced topics – catch-all controls, post-shipment diversion, and multi-jurisdictional enforcement
- Entity list screening under the Australian autonomous sanctions regime – screening obligations and procedural requirements for exporters in the Indo-Pacific